codex_modify_user

What codex_modify_user does on Sage MCP

AI agents use codex_modify_user to create or update resources in Sage MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Sage MCP environment.

Why codex_modify_user is rated Medium

This tool modifies user records, which is a reversible Write operation. Severity is high because modifying user accounts could affect access control, permissions, authentication state, or user identity metadata. However, it falls short of critical because the operation is typically reversible (users can be restored or re-modified) and the blast radius depends on which user attributes are modified.

From the tool's definition Tool name 'codex_modify_user' and description 'Modify a user' indicate the tool creates or modifies user data. The verb 'modify' is explicitly a Write operation that changes existing records reversibly.

The rule that runs codex_modify_user safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Sage MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For codex_modify_user, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "codex_modify_user": {
      "limits": [
        {
          "counter": "codex_modify_user_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about codex_modify_user